Important: virt:kvm_utils3 security update (Oracle Linux 8)

hivex
[1.3.18-23]
- Limit recursion in ri-records (CVE-2021-3622)
resolves: rhbz#1976194

[1.3.18-22.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

[1.3.18-21]
- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#1950501

[1.3.18]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.3.18]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.3.15-7]
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)

[1.3.15-6]
- Drop hivex-static subpackage
resolves: rhbz#1560207

[1.3.15-5]
- Rebuild for OCaml 4.07.0.

[1.3.15-4]
- Remove python2 support
resolves: rhbz#1559086

[1.3.15-3]
- Add upstream patch to fix injection of LDFLAGS (RHBZ#1548536).

libguestfs
[1.44.0-9.0.3]
- libguestfs.spec: Allow kernel-uek in additional to kernel [Orabug: 38825835]

libguestfs-winsupport
[8.10-1]
- Rebase to ntfs-3g 2022.10.3
- Fixes: CVE-2022-40284
- resolves: rhbz#2236373

[8.8-1]
- Rebase to ntfs-3g 2022.5.17
- Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
resolves: rhbz#2127240 rhbz#2127248
(also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263)

[8.6-1]
- Rebase to ntfs-3g 2021.8.22
- Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,
CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,
CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254
resolves: rhbz#2004490

[8.2-1.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

[8.2]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[8.0-4]
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)

[8.0-3]
- Fix for CVE-2019-9755
(heap-based buffer overflow leads to local root privilege escalation)
resolves: rhbz#1698503

[8.0-2]
- Fix for ntfsclone crash (RHBZ#1601146).

[8.0-1]
- Rebase to 2017.3.23.
- Remove patches which are now upstream.
- Resynch with Fedora package.
- Enable all architectures for RHEL 8.

[7.2-2]
- Fix for handling guest filenames with invalid or incomplete
multibyte or wide characters
resolves: rhbz#1301593

libiscsi
[1.18.0-8]
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)

[1.18.0-7.el8]
- libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
- Resolves: bz#1581025
(Remove --disable-werror from spec file)

[-]
- libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
- Resolves: bz#1597942
(Qemu-kvm fails to connect to iscsi LUN by IPV6 address)

[1.18.0-5.el8]
- libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
- libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
- libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
- libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
- libiscsi-avoid-fallthrough.patch [bz#1634541]
- libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
- Resolves: bz#1634541
(Fix important coverity issues (libiscsi))

[1.18.0-4.el8]
- Fixed a build issue with the latest rdma-core

[1.18.0-2]
- Fix rdma deps and don't restrict archs
- Add --disable-werror to fix gcc8 build (bz #1556044)
- Spec file cleanups (bz #1483290)

[1.18.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.18.0-1]
- Rebased to version 1.18.0
- Added patch to fix gcc7 warnings

[1.15.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.15.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

libnbd
[1.6.0-6.el8]
- Fix CVE-2024-7383 NBD server improper certificate validation
resolves: RHEL-52728

[1.6.0-5.el8]
- Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails
resolves: rhbz#2045718

[1.6.0-4.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

[1.2.2]
- Resolves: bz#1844296
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.2.2-1]
- New stable release 1.2.2.

[1.2.1-1]
- New stable release 1.2.1.

[1.2.0-1]
- New stable release 1.2.0.

[1.0.3-1]
- New upstream version 1.0.3.
- Contains fix for remote code execution vulnerability.
- Add new libnbd-security(3) man page.

[1.0.2-1]
- New upstream version 1.0.2.
- Remove patches which are upstream.
- Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
- Fix previous commit message.

[1.0.1-2]
- Add upstream patch to fix nbdsh (for nbdkit tests).
- Fix interop tests on slow machines.

libtpms
[0.9.1-3.20211126git1ff6fe1f43]
- Fix CVE-2025-49133
Resolves: RHEL-96251

[0.9.1-2.20211126git1ff6fe1f43]
- Backport 'tpm2: Check size of buffer before accessing it' (CVE-2023-1017 & CVE-2023-1018)
Resolves: rhbz#2173964
Resolves: rhbz#2173970

[0.9.1-1.20211126git1ff6fe1f43]
- Backport s_ContextSlotMask initialization fix
Resolves: rhbz#2111433

[0.9.1-0.20211126git1ff6fe1f43]
- Rebase to 0.9.1 (sync with RHEL9)
Resolves: rhbz#2029355

[0.7.4-6.20201106git2452a24dab]
- Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
Resolves: rhbz#1999307

[0.7.4-5.20201106git2452a24dab]
- Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
Fixes: rhbz#1976816

[0.7.4-4.20201106git2452a24dab]
- tpm2: CryptSym: fix AES output IV
Fixes: rhbz#1942904

[0.7.4-3.20201106git2452a24dab]
- Add git as build dependency
Related: rhbz#1858821

[0.7.4-2.20201106git2452a24dab]
- tpm2: Return properly sized array for b parameter for NIST P521 (HLK) #180
Fixes: rhbz#1858821

[0.7.4-1.20201106git2452a24dab]
- Follow stable-0.7.0 branch to v0.7.4 with security-related fixes.
Fixes: rhbz#1893444

libvirt
[9.0.0-16.el8]
- cpu_map: Add cpu model EPYC Genoa (Tim W